Cmc
52 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Cmc, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Cmc CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 2 |
| 2025-07 | 0 |
| 2025-08 | 1 |
| 2025-09 | 0 |
| 2025-10 | 7 |
| 2025-11 | 1 |
| 2025-12 | 4 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 2 |
| 2026-04 | 2 |
| 2026-05 | 5 |
| 2026-06 | 0 |
| 2026-07 | 5 |
| 2026-08 | 0 |
| 2026-09 | 5 |
Severity
How the 52 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High28
- Medium23
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Cmc.
- CVE-2026-33920Cross-site request forgery in the Guardian/CMC login before 26.3.03.5
- CVE-2026-33391Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.05.4
- CVE-2026-33389Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.07.5
- CVE-2026-33388Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.07.4
- CVE-2026-33387Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.04.6
- CVE-2026-33390Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.08.1
- CVE-2026-31984DoS through oversized audit log entries in Guardian/CMC before 26.2.07.5
- CVE-2026-31983Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.05.3
- CVE-2026-31982Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.07.1
- CVE-2026-31981HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.05.9
- CVE-2025-40904HTML injection in Smart Polling in Guardian/CMC before 26.1.06.5
- CVE-2025-40903HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.05.9
- CVE-2025-40902HTML injection in Users in Guardian/CMC before 26.1.05.9
- CVE-2025-40901HTML injection in Credentials Manager in Guardian/CMC before 26.1.05.9
- CVE-2025-40900Angular template injection in Reports in Guardian/CMC before 26.1.04.6
Product grouping is registry-driven, with AI assist and human review. How it works